Agentic Coding Assistants, and Why I Don't Let Them Grade Their Own Work

“Agentic” gets thrown around loosely, but it means something specific: an assistant that decides its own next step instead of waiting for yours. That’s also exactly why you can’t trust it to tell you when it’s done a good job; here’s the verification habit that fixes that.

September 2, 2026 · 8 min · Hanh Pham

When Two-Phase Commit Isn't the Answer: Sagas for Microservice Transactions

Splitting a monolith means splitting its database transactions too. The instinct is to reach for a distributed transaction. Here’s why that instinct is usually wrong, and what to do instead.

September 1, 2026 · 8 min · Hanh Pham

How I Started Learning Reverse Engineering (and What I Wish I Knew First)

I spent my first month with Ghidra staring at assembly I didn’t understand, convinced I was too stupid for this. Here’s the honest version of how I got from ‘what is a register’ to solving CTF reversing challenges, and the mistakes that cost me weeks.

August 29, 2026 · 7 min · Hanh Pham

Anti-Debugging Tricks: When the Binary Fights Back

Some binaries detect that you’re debugging them and crash, change behavior, or hide the flag. This post covers the common anti-debugging techniques and how to bypass them.

August 27, 2026 · 4 min · Hanh Pham

Custom VMs in CTF: When the Binary Speaks Its Own Language

Some CTF reversing challenges hide the flag behind a custom virtual machine: a program that interprets its own bytecode. This post shows you how to spot them, reverse the instruction set, and write a solver.

August 25, 2026 · 6 min · Hanh Pham

Your First Crackme: A Walkthrough from strings to Flag

A crackme is a small binary that asks for a password and checks your input. This post walks through solving one, from downloading the binary to extracting the flag, with every tool click explained so you can follow along.

August 22, 2026 · 6 min · Hanh Pham

REST, gRPC, GraphQL, or a Broker: Picking Your Communication Tech

The communication style (sync/async, request-response/event-driven) narrows the field. Here’s how the actual technologies stack up once you’re choosing among them.

August 20, 2026 · 7 min · Hanh Pham

Ghidra in 30 Minutes: Reading Assembly Without Hating It

Ghidra’s decompiler turns machine code into something that looks like C. But the output is full of strange variable names, weird casts, and functions that look nothing like what you’d write. Here’s how to read it anyway.

August 18, 2026 · 6 min · Hanh Pham

Debugging Microservices: Where Did That Request Go?

In a monolith, a stack trace tells you what went wrong. In microservices, you’re grepping across three services’ logs at 2 AM trying to figure out which one lost the request. Here’s how to make that possible instead of painful.

August 15, 2026 · 9 min · Hanh Pham

Versioning Microservices Without Breaking Everyone

In a monolith, renaming a field means updating all callers in one commit. In microservices, consumers upgrade on their own schedule, so your API has to evolve without breaking the ones that haven’t upgraded yet. Here’s how.

August 13, 2026 · 9 min · Hanh Pham